CVE-2026-102160
HighCVSS 7.2Summary
An operating system (OS) command injection vulnerability in CloudVision CUE backup management may allow an authenticated Super User to submit a crafted backup request and execute arbitrary commands with the privileges of the affected service.
Risk Assessment
An authenticated Super User can execute arbitrary commands on the system, potentially leading to full compromise of the service and host.
Recommendation
Limit the number of Super User accounts, monitor backup operations, and promptly apply the vendor patch.
Other vulnerabilities in CloudVision CUE
See all- CVE-2026-102158Medium
Improper validation of selected CloudVision CUE API request parameters may allow an authenticated network user to perform SQL injection against the backend, impacting its availability.
- CVE-2026-102157Medium
An IDOR vulnerability in a CloudVision CUE file-serving interface may allow an authenticated network user, under specific attack conditions, to access another user's transient data.
Original NVD description (English source)
An operating system (OS) command injection vulnerability in CloudVision CUE backup management may allow an authenticated Super User to submit a crafted backup request and execute arbitrary commands with the privileges of the affected service.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS